WO2022267407A1

WO2022267407A1 - Automated operation and maintenance tool-based proxy deployment method and apparatus

Info

Publication number: WO2022267407A1
Application number: PCT/CN2021/141134
Authority: WO
Inventors: 曹旭东; 冯坤炎
Original assignee: 深圳前海微众银行股份有限公司
Priority date: 2021-06-22
Filing date: 2021-12-24
Publication date: 2022-12-29
Also published as: CN113438292A

Abstract

Embodiments of the present application provide an automated operation and maintenance tool-based proxy deployment method and apparatus. The method comprises: a deployment server sends a detection instruction to a deployment client on the basis of an installed automated operation and maintenance tool; the deployment server receives a notification that detection is successful, and then sends an installation proxy instruction to the deployment client on the basis of the automated operation and maintenance tool, wherein the installation proxy instruction is used to instruct the deployment client to obtain a proxy software package from a software package manager and install a proxy program; the deployment server changes an original host name of the deployment client to a host name of a preset format on the basis of the automated operation and maintenance tool; the deployment server obtains a registration result of the deployment client in a management server on the basis of the automated operation and maintenance tool; and the deployment server restores the host name to the original host name on the basis of the automated operation and maintenance tool. The described method may effectively reduce the deployment workload and preparation period and increase deployment efficiency on the premise of increasing the simplicity of client management.

Description

A method and device for agent deployment based on automated operation and maintenance tools

Cross References to Related Applications

This application claims the priority of the Chinese patent application submitted to the China Patent Office on June 22, 2021, with the application number 202110691764.X and the application name "A method and device for agent deployment based on automated operation and maintenance tools", all of which The contents are incorporated by reference in this application.

technical field

The present application relates to the network technology field of financial technology (Fintech), in particular to an agent deployment method and device based on automated operation and maintenance tools.

Background technique

In recent years, with the development of computer technology, more and more technologies are applied in the financial field, and the traditional financial industry is gradually transforming into Fintech. However, due to the security and real-time requirements of the financial industry, there are also requirements higher requirement. For example, the current enterprise-level network management systems of various companies in the financial industry usually include a complete enterprise-level security information management system to ensure the privacy of user information and system communications. Commonly used security information management systems, such as FreeIPA.

FreeIPA is an integrated security information management solution. FreeIPA includes Linux (Fedora), 389Directory Server (lightweight directory access), MIT Kerberos (the core of domain name authentication), NTP (Network Time Protocol, Network Time Protocol), DNS (Domain Name System, Domain Name System), Dogtag (Certificate System) (an authentication system that provides a strong security framework to ensure the identity of users and the privacy of communications) and other identity authentication and policy functions. Under the freeIPA system, you need to install the freeIPA client on each machine, and register the machine with the freeIPA server to realize security information management.

In the prior art, the traditional C/S architecture release system is usually used to deploy the freeIPA client (sssd daemon process). This method needs to deploy the release system on the release server and the release client to realize the deployment of the sssd daemon process. The workload is heavy, the preparation period is long, and the efficiency is low.

Therefore, there is an urgent need for an agent deployment method and device based on automated operation and maintenance tools, which can reduce deployment workload and preparation period, and improve deployment efficiency.

Contents of the invention

Embodiments of the present application provide an agent deployment method and device based on an automated operation and maintenance tool, which can reduce deployment workload and preparation period, and improve deployment efficiency.

In the first aspect, the embodiment of the present application provides an agent deployment method based on an automated operation and maintenance tool, the method including:

The deployment server sends a detection instruction to the deployment client based on the installed automated operation and maintenance tool; the deployment server sends an installation agent instruction to the deployment client based on the automated operation and maintenance tool after receiving the detection passing notification; The installation agent instruction is used to instruct the deployment client to obtain the agent software package from the software package manager and install the agent program; the deployment server changes the first host name to the second host name based on the automated operation and maintenance tool, The first host name is the original host name of the deployment client, and the second host name is a host name in a preset format; A registration result of the management server; the deployment server restores the second host name to the first host name based on the automated operation and maintenance tool.

In the above method, by installing the automated operation and maintenance tool in the deployment server, the deployment server directly instructs the deployment client to install the agent program according to the local IP of the deployment client. Compared with the need to build a publishing system architecture in the prior art, this application does not need to build a traditional publishing system, which can effectively reduce the deployment workload and preparation period, and improve deployment efficiency. And before installing the agent program, detecting the installation condition of the agent program on the deployment client can ensure the normal operation of the agent program on the deployment client. The deployment server changes the original host name of the deployment client to a host name in a preset format, and restores the host name to the original host name after obtaining the registration result of the deployment client on the management server. In this way, the host name of each deployment client in the management server is a host name in a preset format, and the preset format can be set as required, so that the management server can manage each deployment client. After the registration is completed, restoring the host name to the original host name can also prevent other services from being abnormal due to the change of the host name when the original host name is applied to other services. That is, in the case of ensuring the normal operation of each service of the deployed client, the convenience of managing the deployed client is improved.

Optionally, after sending the installation agent instruction to the deployment client, it also includes:

The deployment server monitors the installation status of the deployment client based on the automated operation and maintenance tool; if the installation is not successful within a preset period of time, an end installation instruction is sent to the deployment client based on the automated operation and maintenance tool .

In the above method, the automated operation and maintenance tool in the deployment server sets a monitoring process for each deployment client to monitor the loading process of the agent package of the client. If it is determined that the deployment client does not receive the described The agent software package sent by the software package manager; the deployment server will send an end installation instruction to end the installation of the agent program. In this way, the deployment client is prevented from continuously trying to connect to the package manager to obtain the agent package, which leads to waste of resources.

Optionally, after the deployment server changes the first hostname to the second hostname based on the automated operation and maintenance tool, it includes: the deployment server detects that the deployment client is based on the automated operation and maintenance tool After the terminal is successfully installed, send a host name change instruction; the host name change instruction is used to instruct the deployment client to use the second host name as the host name of the deployment client;

The deployment server restores the second host name to the first host name based on the automated operation and maintenance tool, including:

The deployment server sends a host name restoration instruction to the deployment client based on the automated operation and maintenance tool; the host name restoration instruction is used to instruct the deployment client to update the first host name to the deployment client The hostname of the client.

In the above method, the first host name that does not conform to the preset format is changed to the second host name that conforms to the preset format. For example, change the first host name that uses a meaningless character string as the host name to the second host name that complies with the rules of the second-level domain name. In this way, the deployment client can communicate with the management server through the second host name to perform registration management and the like. After the communication between the deployment client and the management server is completed, the deployment server sends the host name recovery command to the deployment client, so that other services communicate with the client through the first host name, preventing other services from failing to restore the first host name. In case of failure to operate normally, ensure the reliability of services provided by the deployment client.

The deployment server sends an address addition instruction to the deployment client based on the automated operation and maintenance tool, the address addition instruction includes a search instruction, and the address addition instruction is used to instruct the deployment client When the above search command confirms that the domain name and IP address of the management server are not included in the domain name file, the domain name and IP address of the management server are added to the domain name file.

In the above method, the deployment server sends an address addition instruction to the deployment client to add the domain name and IP address of the management server to the domain name file of the deployment client. Compared with the prior art that directly replaces the domain name file in the deployment client to realize that the domain name file contains the domain name and IP address of the management server; this application prevents the domain name and IP address of the management server from being deployed in the client. The original domain name file is lost, resulting in abnormalities in services that rely on the original domain name file; and the agent program can check the current domain name file according to the search command in the address addition command. If it contains the domain name and IP address of the management server, it does not need to be appended to prevent If the target location of the domain name file already contains the IP address and domain name of the management server, the address of the target location is duplicated due to the addition, and the process of adding the domain name file is simplified.

Optionally, after sending the address addition instruction to the deployment client, it further includes: the deployment server sends a registration instruction to the deployment client based on the automated operation and maintenance tool, and the registration instruction is used to indicate the The deployment client adds the domain name and IP address of the management server to the authentication configuration file, and authenticates the management server according to the authentication configuration file.

In the above method, the domain name and IP address of the management server in the domain name file are added to the authentication configuration file, so that the deployment client can perform authentication with the management server according to the domain name and IP address of the management server in the authentication configuration file, ensuring Authentication reliability.

Optionally, after obtaining the registration result of the deployment client on the management server based on the automated operation and maintenance tool, the deployment server further includes: the deployment server obtains the If the registration of the deployment client is completed, a test instruction is sent to the deployment client, and the test instruction is used to instruct the deployment client to test whether the registration with the management server is successful.

In the above method, the deployment server acquires the registration completion status of the deployment client based on the automated operation and maintenance tool. If the registration is completed, a test instruction is sent to the deployment client, so that the deployment client tests whether the registration of the deployment client in the management server is successful. If it fails, you can re-initiate the agent deployment process, or initiate a registration failure alarm, and the staff will handle it accordingly. Ensure the reliability of the deployment client registration on the management server.

Optionally, after sending the installation agent instruction to the deployment client, it further includes: the deployment server obtains the successful registration status of the deployment client based on the automated operation and maintenance tool, and the deployment server obtains the registration success status based on the deployment server The automated operation and maintenance tool sends a configuration change instruction to the deployment client, where the configuration change instruction is used to instruct the deployment client to add a configuration file to the target location of the agent program.

In the above method, after the registration of the deployment client is successful, the deployment server can also send a configuration change instruction to the deployment client based on the automatic operation and maintenance tool, so that the deployment client can add a configuration file to the target location of the agent program. Compared with the prior art, the corresponding configuration file is overwritten directly in the agent program, resulting in the loss of the original configuration file, which affects the abnormality of modules that implement corresponding functions based on the original configuration file. This application can guarantee the reliability of the operation of the deployment client.

In the second aspect, the embodiment of the present application provides an agent deployment method based on an automated operation and maintenance tool. The method includes: deploying the automated operation and maintenance tool installed on the server side, and sending a detection instruction to the deployment client; The detection instruction detects that the authentication configuration file is included locally, and the authentication file contains a preset sentence, generates a detection pass notification, and sends the detection pass notification to the deployment server; the deployment server After receiving the notification of passing the detection, an installation agent instruction is sent to the deployment client based on the automated operation and maintenance tool; the deployment client obtains the agent software package from the software package manager according to the installation agent instruction and installs the agent program ; Based on the automated operation and maintenance tool, the deployment server detects that the deployment client is successfully installed, and then sends a host name change command to the deployment client; the deployment client sends the first host name change command to the deployment client according to the host change command The host name is changed to a second host name, the first host name is the original host name of the deployment client, and the second host name is a host name in a preset format; the deployment client registers with the management server, And obtain the registration result; the deployment server obtains the registration result of the deployment client on the management server based on the automatic operation and maintenance tool, and restores the second host name to the first host name.

In the above method, by installing the automated operation and maintenance tool in the deployment server, the deployment server directly instructs the deployment client to install the agent program according to the local IP of the deployment client. Compared with the need to build a publishing system architecture in the prior art, this application does not need to build a traditional publishing system, which can effectively reduce the deployment workload and preparation period, and improve deployment efficiency. And before installing the agent program, let the deployment client detect that the local authentication configuration file is included according to the detection instruction, and the authentication file includes default statements. In this way, if the default statement is the default statement of the authentication configuration file, it can be considered that no other service uses the authentication configuration file, and the authentication configuration file can be used; otherwise, the authentication configuration file is being applied by other services, if still Performing the agent deployment process will cause other services to be abnormal. Through this detection step, the business reliability of the deployed client can be effectively improved. After the agent program is successfully installed, change the original host name of the deployment client to a host name in a preset format, such as domain name plus IP address, etc., so that the information of the deployment client registered in the management server is visible and easy to manage. After obtaining the registration result, restore the hostname in the preset format of the deployed client to the original hostname. In this way, other services running through the original host name can still run normally, ensuring the reliability of the business operation of the deployed client.

In the third aspect, the embodiment of the present application provides an agent deployment device based on an automated operation and maintenance tool, which includes:

The processing module is used for installation-based automated operation and maintenance tools, and sends detection instructions to the deployment client through the sending module;

After the processing module receives the detection pass notification through the receiving module, based on the automated operation and maintenance tool, it sends an installation agent instruction to the deployment client through the sending module; the installation agent instruction is used to instruct the deployment client Get the agent package from the package manager and install the agent.

In the fourth aspect, the embodiment of the present application also provides a computing device, including: a memory for storing programs; a processor for invoking the programs stored in the memory, and executing the obtained programs according to the first aspect and the second aspect. Aspects of the various possible designs are described in the method.

In the fifth aspect, the embodiment of the present application also provides a computer-readable non-volatile storage medium, including a computer-readable program. When the computer reads and executes the computer-readable program, the computer executes the computer-readable program described in the first aspect and The method described in various possible designs of the second aspect.

These implementation manners or other implementation manners of the present application will be more concise and understandable in the description of the following embodiments.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present application, the following will briefly introduce the drawings that need to be used in the description of the embodiments. Obviously, the drawings in the following description are only some embodiments of the present application. For Those of ordinary skill in the art can also obtain other drawings based on these drawings without any creative effort.

FIG. 1 is a schematic diagram of the architecture of agent deployment based on automated operation and maintenance tools provided by the embodiment of the present application;

FIG. 2 is a schematic diagram of the architecture of agent deployment based on automated operation and maintenance tools provided by the embodiment of the present application;

FIG. 3 is a schematic flow diagram of an agent deployment method based on an automated operation and maintenance tool provided in an embodiment of the present application;

FIG. 4 is a schematic flow diagram of an agent deployment method based on an automated operation and maintenance tool provided in an embodiment of the present application;

FIG. 5 is a schematic diagram of an agent deployment device based on an automated operation and maintenance tool provided in an embodiment of the present application;

FIG. 6 is a schematic diagram of an apparatus for deploying an agent based on an automated operation and maintenance tool according to an embodiment of the present application.

detailed description

In order to make the purpose, technical solution and advantages of the application clearer, the application will be further described in detail below in conjunction with the accompanying drawings. Apparently, the described embodiments are only some of the embodiments of the application, not all of them. Based on the embodiments in this application, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the scope of protection of this application.

Fig. 1 is a system architecture of agent deployment based on automated operation and maintenance tools provided by the embodiment of the present application, wherein the deployment server is installed with automated operation and maintenance tools, and may also include information such as the IP address of each deployment client. For example, record the IP addresses of each deployment client through the IP address list. Then the deployment server can send detection instructions to the deployment client corresponding to the IP address based on the automated operation and maintenance tool. After the deployment client receives the detection instruction, it detects whether the deployment client can perform the agent deployment process according to the detection instruction. If the detection fails, the agent deployment process will not be executed, and an alarm can be generated to the staff; Detections are sent to the deployment server via notifications. After receiving the detection pass notification, the deployment server sends installation agent instructions to the deployment client based on the automated operation and maintenance tool, and sets a corresponding monitoring process for each deployment client to monitor the installation status of the deployment client in real time. After the deployment client receives the installation agent instruction, it downloads the agent software package from the package manager; if the installation of the agent program fails or is abnormal, the deployment server detects the installation failure or abnormal state, and sends an end message to the deployment client. An installation instruction; otherwise, after the deployment server monitors that the agent program is installed successfully, it sends a host name change instruction to the deployment client, and also sends an address addition instruction to the deployment client. The deployment client changes the host name according to the host name change instruction, and after receiving the address addition instruction to add the domain name and IP address of the management server to the domain name file, the deployment client initiates authentication to the management server and completes the registration. The deployment server determines that the registration status of the deployment client is the registration completed state, and then sends a test instruction, so that the deployment client tests whether the registration between the deployment client and the management server is successful. After the deployment server obtains the registration result of the deployment client, it restores the host name in the preset format of the deployment client to the original host name. What needs to be explained here is that no matter whether the registration result is successful or failed, the host name of the final deployment client must be restored to the original host name to ensure the normal operation of other services in the deployment client. In this way, it can ensure that the information of the deployment client in the management server is highly visible and easy to manage, and can also ensure the normal operation of various services of the deployment client, thereby improving service reliability. In the above system architecture, an automated operation and maintenance tool is provided in the deployment server, which can instruct the deployment client to execute the agent deployment process during the agent program installation process; compared with the need to build a publishing system in the prior art, this application There is no need to build a release system in advance, which can effectively reduce the agent deployment workload and preparation cycle, and improve deployment efficiency.

The embodiment of the present application also provides a system framework for agent deployment based on automated operation and maintenance tools, as shown in Figure 2, the automated operation and maintenance tool set by the deployment server is Ansiblee; the management server is provided with FreeIPA; the software package manager It is Yum (Yellow dog Updater, Modified, a front-end package manager), which contains the agent software package required for deploying the client; the deployment client includes the client of the FreeIPA system and the front-end of the Yum system, and the agent is SSSD Daemon.

Based on the above system architecture, the embodiment of the present application provides an agent deployment method process based on automated operation and maintenance tools, as shown in Figure 3, including:

Step 301, the deployment server sends detection instructions to the deployment client based on the installed automated operation and maintenance tool;

Here, in an example, the automated operation and maintenance tool included in the deployment server includes the IP addresses of each deployment client. For example, there is an IP address record or IP address list, and the automated operation and maintenance tool traverses the IP address record or IP address list. A detection instruction is sent to each deployment client respectively; the detection instruction is used to instruct the deployment client to detect whether it has a deployment agent program and to register. For example, it can be used to instruct the deployment client to check whether its own configuration file contains relevant default statements; if the configuration file is generated by the kerberos protocol (computer network authorization protocol), the deployment client needs to use the kerberos protocol for authentication during the registration process. Right, need to configure /etc/krb5.conf; Therefore, in order to ensure the reliable execution of the registration process, it is necessary to detect and confirm that the deployment client has the first preset statement /etc/krb5.conf; if the configuration file of the deployment client contains this For the first default statement, it is necessary to further determine whether the configuration file contains the second default statement kerberos.example.com; the second default statement is kerberos.example.com, which is used to determine whether the configuration file is the default , if the configuration file contains the second default statement, it can be determined that no other service is applying this configuration file; in this example, if the configuration file contains the first default statement but not the second default statement, then The configuration file representing the deployment client is applied by other services. If the agent deployment process continues, there is a high probability that other services will be abnormal. If the detection determines that the configuration file of the deployment client contains the first preset statement and the second If the default statement is used, it is determined that the test is passed.

If the automated operation and maintenance tool is Ansiblee, the deployment server can execute cat /etc/krb5.conf|grep kerberos.example.com based on the shell module of Ansiblee to detect the first preset statement and the second preset statement of the client. If the return of Ansiblee's shell is not empty, the agent deployment process can continue to execute. Otherwise, if the detection fails, a corresponding alarm can be generated to notify the staff to deal with it. The reliability of agent deployment is guaranteed.

Step 302, after the deployment server receives the detection pass notification, it sends an installation agent instruction to the deployment client based on the automated operation and maintenance tool; the installation agent instruction is used to instruct the deployment client to download from the software package manager Get the agent package and install the agent;

Here, based on the above example, the package manager is Yum (full name Yellow dog Updater, Modified); then the deployment server uses Ansiblee's yum module to send installation agent instructions to the deployment client, so that the deployment client obtains from the management server Proxy package. In addition, the deployment server can monitor the yum system in the deployment client and management server through Ansiblee. If the yum system is abnormal, it can be repaired directly. If it cannot be repaired, an alarm will be generated. What needs to be explained here is that the agent software package can also contain other software packages, such as SUDO, a program for generating instructions. After the installation is completed, the agent program can update SUDO to new.

Step 303, the deployment server changes the first host name to a second host name based on the automated operation and maintenance tool, the first host name is the original host name of the deployment client, and the second host name is the hostname in the preset format;

Here, the host name in the preset format can be the basic information for deploying the client, such as domain name, IP address, operator, etc., which can be set according to specific needs, and the specific setting method of the preset format is not limited here.

Step 304, the deployment server obtains the registration result of the deployment client on the management server based on the automated operation and maintenance tool;

Step 305, the deployment server restores the second host name to the first host name based on the automated operation and maintenance tool.

Here, the recovery mechanism of 'reverting the second host name to the first host name' can be set as a relief mechanism, that is, no matter whether the previous program execution succeeds or fails, or any abnormality occurs, etc., In the end, the host name in the preset format must be restored to the original host name to ensure the normal operation of other services in the deployed client.

An embodiment of the present application provides an agent deployment method based on an automated operation and maintenance tool. After sending an installation agent instruction to the deployment client, it further includes: the deployment server monitors the deployment based on the automated operation and maintenance tool. The installation status of the client; if the installation is not successful within a preset period of time, an instruction to end the installation is sent to the deployment client based on the automated operation and maintenance tool. That is to say, after the deployment client receives the installation agent instruction, it obtains and installs the agent software package from the management server based on the installation agent instruction; and the deployment server generates a corresponding monitoring process for each deployment client after sending the installation agent instruction , monitor the status of the deployment client installation agent program, if the deployment client does not complete the installation within the preset time, then send an end installation instruction, so that the deployment client ends the installation of the agent program and records the deployment client. In this way, it can be confirmed in time that the deployment client is in an abnormal state, and it can also prevent the deployment client from continuously trying to connect to the management server, causing the task to be stuck and wasting network resources.

Based on the above example, after the deployment server Ansiblee sends the installation agent command, Ansiblee will run all the deployment client installation agent tasks at one time, and throw all the deployment client installation agent tasks to the background for execution. Each installation agent task has one job_id, Ansiblee polls and detects the execution status of the installation agent task at regular intervals according to the job_id until it detects that the execution of the installation agent task ends. For example, if the installation agent task is up to 30 seconds, Ansiblee will wait for the installation agent task for up to 30 seconds, and check the execution result of the installation agent task every 5 seconds. If the installation is not successful after 30 seconds, then the The installation status of the deployment client installation agent is failure; the deployment server sends an instruction to end the installation to the deployment client, and can also record relevant abnormal conditions and generate an alarm.

An embodiment of the present application provides an agent deployment method based on an automated operation and maintenance tool, wherein the deployment server changes the first host name to a second host name based on the automated operation and maintenance tool, including: the deployment server Based on the automated operation and maintenance tool, after detecting that the deployment client is successfully installed, a host name change instruction is sent; the host name change instruction is used to instruct the deployment client to use the second host name as the host of the deployment client name;

The deployment server sends a host name restoration instruction to the deployment client based on the automated operation and maintenance tool; the host name restoration instruction is used to instruct the deployment client to update the first host name to the deployment client The hostname of the client. Here, in order to facilitate the management server to manage the deployment clients, the format of the host name of each deployment client in the management server is a preset format. For example, IP address + domain name. Then, after the deployment server sends the host name change command to the deployment client, the deployment client changes the original host name-the first host name to the second host name according to the host name change command, and changes the first host name and the second host name corresponding storage. After registration and other related processes between the management server and the deployment client are completed, the deployment server sends a host name restoration command to the deployment client to restore the first host name to the second host name. In this way, the change of the host name is prevented from causing abnormalities in other services that depend on the first host name.

Based on the above example, Ansible generates a registration command and sends it to the deployment client. After receiving the registration command, the client runs the agent program ipa-client-install to start the registration process. When registering, Ansible instructs the deployment client to change the original host name to the host name in the preset format through the host name change command: IP address + domain name, and calls ipa-client-install to obtain the second host name of the machine, and the second The host name is sent to the management server as the identification of the deployment client in the management server. Wherein, before executing ipa-client-install, record the corresponding relationship between the first host name and the second host name, set a temporary second host name, and send the second host name to the management server. In this process, if the execution of ipa-client-install is successful, the process ends, and the host name is restored, that is, the second host name is changed to the first host name; if the execution of ipa-client-install fails, the process ends, and a mechanism is also required Ensure that the action to restore the hostname, that is, perform the hostname restoration step regardless of whether the registration is successful or not, this step can use Ansiblee's block\always mechanism.

An embodiment of the present application provides an address addition method. After sending the installation agent instruction to the deployment client, it further includes: the deployment server sends an address addition instruction to the deployment client based on the automated operation and maintenance tool. , the address addition instruction includes a search instruction, and the address addition instruction is used to instruct the deployment client to add the domain name file in the domain name file when it confirms that the domain name file does not contain the domain name and IP address of the management server according to the search instruction. Add the domain name and IP address of the management server to . Here, the deployment server sends an address addition command to the deployment client based on the automated operation and maintenance tool. After receiving the address and adding the command, the deployment client adds the domain name and IP address of the management server in the address addition command to the domain name. The target location of the file. In this way, it is prevented that other domain names and IPs are directly replaced in the domain name file, resulting in the loss of the configuration of the deployment client, which may cause abnormal situations in the deployment client. Here, by directly adding the IP address and domain name of the management server to the domain name file, the deployment client's dependence on the domain name server can be reduced.

Based on the above example, the deployment server uses the linefile module of Ansiblee to implement the address addition of the domain name file /etc/hosts file in the deployment client; and the corresponding search command can be set in the address addition command, if the target location of the domain name file already contains For the IP address and domain name, there is no need to add the address repeatedly. In this way, even if the address adding action is executed multiple times, it will not result in unlimited addition of IP addresses and domain names in the domain name file.

An embodiment of the present application provides an authentication method. After sending an address addition instruction to the deployment client, it further includes: the deployment server sends a registration instruction to the deployment client based on the automated operation and maintenance tool, The registration instruction is used to instruct the deployment client to add the domain name and IP address of the management server to the authentication configuration file, and to authenticate the management server according to the authentication configuration file. That is to say, the deployment client adds the domain name and IP address of the management server in the domain name file to the authentication configuration file according to the registration instruction, so as to authenticate the management server according to the authentication configuration file. In this way, the reliability of authentication between the deployment client and the management server is guaranteed.

An embodiment of the present application provides a registration method, wherein the deployment server acquires the registration result of the deployment client on the management server based on the automated operation and maintenance tool, including: the deployment server obtains the registration result of the deployment client based on the automated operation and maintenance tool A tool for obtaining the registration completion status of the deployment client, and then sending a test instruction to the deployment client, where the test instruction is used to instruct the deployment client to test whether the registration with the management server is successful. In the above example, the deployment server sends a test command to the deployment client to test whether the deployment client is successfully registered; the deployment client can execute the id username command; if the management server can accurately receive the execution id username command of the deployment client , and return the information corresponding to the user name, it means that the registration is successful; if the deployment client confirms that the received information is empty and displays nosuch user information, it means that the registration has failed.

The embodiment of the present application provides a configuration change method, after sending the installation agent instruction to the deployment client, it further includes: the deployment server obtains the successful registration status of the deployment client based on the automated operation and maintenance tool, The deployment server sends a configuration change instruction to the deployment client based on the automated operation and maintenance tool, and the configuration change instruction is used to instruct the deployment client to add a configuration file at the target location of the agent program. That is to say, when the deployment server determines that the registration between the deployment client and the management server is successful, it can also change the configuration in the deployment client through a configuration change command, and the modification method is to add a configuration file to the target location of the agent. In this way, the integrity of the configuration in the deployment client can be ensured and the loss of configuration files can be prevented. Based on the above example, if you want to modify the sudo configuration, for example, you need to modify the sudo permission to support the time option, you need to turn on the sudo_timed switch, you can use the lineinfile module like updating the domain name file /etc/hosts to match a certain target location Then add the corresponding configuration. In addition, if the configuration file is in the ini format, you can use the ini_file module of ansible to modify the configuration file to ensure that the format is uniform and the configuration file can be applied reliably.

Based on the above method flow, the embodiment of the present application provides an agent deployment method flow based on an automated operation and maintenance tool, as shown in FIG. 4 , including:

Step 401, the deployment server generates a detection instruction based on the installed automatic operation and maintenance tool, and sends the detection instruction to the deployment client.

Step 402: After receiving the detection instruction, the deployment client detects whether it meets the conditions for installing the agent, and if so, generates a detection notification and sends it to the deployment server; if it does not meet the conditions for installing the agent, the process ends.

Step 403 , after receiving the detection pass notification, the deployment server generates an installation agent instruction based on the automated operation and maintenance tool.

Step 404, the deployment server generates a monitoring process for the deployment client; the detection frequency is set in the monitoring process, and the installation status of the deployment client agent is detected with the detection frequency, and if the installation of the deployment client agent fails, the installation is terminated program; and a preset time period is also set in the monitoring process, if within the preset time period, the deployment client has not yet completed the installation of the agent program, the installation program will end and an alarm will be generated.

Step 405, the deployment server sends the installation agent instruction to the deployment client.

Step 406, the deployment client generates an agent software package loading request according to the installation agent instruction, and sends it to the software package manager.

Step 407: After receiving the proxy software package loading request, the software package manager sends the proxy software package to the deployment client.

Step 408, the deployment client receives the agent software package, and installs the agent program.

Step 409: After the deployment server detects that the agent program of the deployment client is installed successfully, it generates a host name change instruction, and sends the host name change instruction to the deployment client.

Step 410, the deployment client changes the first host name to the second host name according to the host name change instruction, and records the correspondence between the first host name and the second host name.

Step 411 , the deployment server generates an address addition instruction, and sends it to the deployment client.

Step 412: After receiving the address addition instruction, the deployment client appends the domain name and IP address of the management server to the target location of the domain name file according to the address addition instruction, wherein the address addition instruction may include a search instruction for finding whether the target location has Contains the domain name and IP address of the management server to prevent repeated additions and waste of network resources.

Step 413, the deployment server generates a registration instruction and sends it to the deployment client.

Step 414: After receiving the registration instruction, the deployment client adds the domain name and IP address of the management server to the authentication configuration file.

Step 415, the deployment client sends registration information including its own IP address and second host name to the management server according to the domain name and IP address of the management server.

Step 416, the management server receives and records the registration information sent by the deployment client.

Step 417, the deployment server sends a test command to the deployment client.

Step 418: After receiving the test instruction, the deployment client executes the ID user name instruction, and sends the ID user name instruction to the management server.

Step 419, the management server generates corresponding reply information according to the ID username command, and sends the reply information to the deployment client.

Step 420, if the reply information received by the deployment client is empty, then it is determined that the registration fails; if the received reply information is not empty, the registration is successful.

Step 421 , the deployment server detects the registration result of the deployment client, and instructs the deployment client to restore the second hostname to the first hostname.

Step 422, the deployment server sends a configuration change instruction to the deployment client.

Step 423, the deployment client appends a configuration file to the target location of the agent program according to the configuration change instruction.

It should be noted here that the above process steps are not unique, and step 409 and step 410 can be performed before and after any step from step 411 to step 414; step 404 can be performed before step 405 or after step 405. Therefore, the above process steps are just an example, and do not limit the specific implementation of this solution.

Based on the same idea, an embodiment of the present application provides a device for deploying an agent based on an automated operation and maintenance tool. FIG. ,include:

The processing module 501 is used to send detection instructions to the deployment client through the sending module 502 based on the installed automated operation and maintenance tool;

After the processing module 501 receives the detection pass notification through the receiving module 503, based on the automated operation and maintenance tool, it sends an installation agent instruction to the deployment client through the sending module 502; the installation agent instruction is used to instruct the The deployment client fetches the agent package from the package manager and installs the agent;

The processing module 501 changes the first host name to a second host name based on the automated operation and maintenance tool, the first host name is the original host name of the deployment client, and the second host name is preset format; the processing module 501 obtains the registration result of the deployment client in the management server based on the automated operation and maintenance tool; the processing module 501 obtains the second host based on the automated operation and maintenance tool name reverts to the first hostname.

Optionally, the processing module 501 is further configured to: monitor the installation status of the deployment client based on the automated operation and maintenance tool; if the installation is not successful within a preset period of time, based on the automated operation and maintenance tool, through The sending module 502 sends an installation end instruction to the deployment client.

Optionally, the processing module 501 is configured to: based on the automated operation and maintenance tool, after detecting that the deployment client is successfully installed, send a hostname change instruction through the sending module 502; the hostname change instruction is used to Instructing the deployment client to use the second host name as the host name of the deployment client; the second host name is a host name in a preset format; the processing module 501 is based on the automated operation and maintenance tool, through the The sending module 502 sends a hostname recovery instruction to the deployment client; the hostname recovery instruction is used to instruct the deployment client to update the first hostname to the hostname of the deployment client; the first hostname The original hostname for the deployment client.

Optionally, the processing module 501 is further configured to: based on the automated operation and maintenance tool, send an address addition instruction to the deployment client through the sending module 502, the address addition instruction includes a search instruction, and the The address addition instruction is used to instruct the deployment client to add the domain name and IP address of the management server to the domain name file when confirming that the domain name file does not contain the domain name and IP address of the management server according to the search instruction.

Optionally, the processing module 501 is further configured to: based on the automated operation and maintenance tool, send a registration instruction to the deployment client through the sending module 502, the registration instruction is used to instruct the deployment client to The domain name and IP address of the management server are added to the authentication configuration file, and the management server is authenticated according to the authentication configuration file.

Optionally, the processing module 501 is further configured to: obtain the registration completion status of the deployment client based on the automated operation and maintenance tool, and send a test instruction to the deployment client through the sending module 502, the The test instruction is used to instruct the deployment client to test whether the registration on the management server is successful.

Optionally, the processing module 501 is further configured to: obtain the successful registration status of the deployment client based on the automated operation and maintenance tool, and the processing module 501 uses the sending module 502 based on the automated operation and maintenance tool Sending a configuration change instruction to the deployment client, where the configuration change instruction is used to instruct the deployment client to add a configuration file at the target location of the agent program.

Based on the same idea, an embodiment of the present application provides a device for deploying an agent based on an automated operation and maintenance tool. FIG. , including: the processing module 601 is used for the installation-based automated operation and maintenance tool, and sends a detection instruction to the deployment client through the sending module 602; the processing module 601 detects that the local authentication configuration file is included according to the detection instruction, and the authentication The right configuration file contains preset sentences, generates a notification of passing the detection, and sends the notification of passing the detection to the deployment server through the sending module 602; after receiving the notification of passing the detection through the receiving module 603, the sending Module 602 sends an installation agent instruction to the deployment client based on the automated operation and maintenance tool; the processing module 601 obtains an agent software package from the software package manager according to the installation agent instruction and installs an agent program; the processing module 601 Based on the automated operation and maintenance tool, after detecting that the deployment client is successfully installed, the sending module 602 sends a host name change command to the deployment client; the processing module 601 sends the first host name change command according to the host change command. The host name is changed to a second host name, the first host name is the original host name of the deployment client, and the second host name is a host name in a preset format; the processing module 601 registers with the management server, And obtain the registration result; the processing module 601 obtains the registration result of the deployment client on the management server based on the automatic operation and maintenance tool, and restores the second host name to the first host name.

Those skilled in the art should understand that the embodiments of the present application may be provided as methods, systems, or computer program products. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

The present application is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to the present application. It should be understood that each procedure and/or block in the flowchart and/or block diagram, and a combination of procedures and/or blocks in the flowchart and/or block diagram can be realized by computer program instructions. These computer program instructions may be provided to a general purpose computer, special purpose computer, embedded processor, or processor of other programmable data processing equipment to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing equipment produce a An apparatus for realizing the functions specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing apparatus to operate in a specific manner, such that the instructions stored in the computer-readable memory produce an article of manufacture comprising instruction means, the instructions The device realizes the function specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions can also be loaded onto a computer or other programmable data processing device, causing a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process, thereby The instructions provide steps for implementing the functions specified in the flow chart or blocks of the flowchart and/or the block or blocks of the block diagrams.

Obviously, those skilled in the art can make various changes and modifications to the application without departing from the spirit and scope of the application. In this way, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalent technologies, the present application is also intended to include these modifications and variations.

Claims

A method for deploying an agent based on an automated operation and maintenance tool, wherein the method includes:

The deployment server sends detection instructions to the deployment client based on the installed automated operation and maintenance tool;

After receiving the detection pass notification, the deployment server sends an installation agent instruction to the deployment client based on the automated operation and maintenance tool; the installation agent instruction is used to instruct the deployment client to obtain the agent software from the software package manager Package and install the agent;

The deployment server changes the first host name to a second host name based on the automated operation and maintenance tool, the first host name is the original host name of the deployment client, and the second host name is preset The hostname in the format;

The deployment server obtains the registration result of the deployment client on the management server based on the automated operation and maintenance tool;

The deployment server restores the second host name to the first host name based on the automated operation and maintenance tool.
The method according to claim 1, further comprising: after sending the installation agent instruction to the deployment client:

The deployment server monitors the installation status of the deployment client based on the automated operation and maintenance tool;

If the installation is not successful within a preset period of time, an instruction to end the installation is sent to the deployment client based on the automated operation and maintenance tool.
The method according to claim 1, wherein the deployment server changes the first host name to the second host name based on the automated operation and maintenance tool, including:

After the deployment server detects that the deployment client is successfully installed based on the automated operation and maintenance tool, it sends a host name change instruction; the host name change instruction is used to instruct the deployment client to use the second host name as the The host name of the deployment client;

The deployment server restores the second host name to the first host name based on the automated operation and maintenance tool, including:

The deployment server sends a host name restoration instruction to the deployment client based on the automated operation and maintenance tool; the host name restoration instruction is used to instruct the deployment client to update the first host name to the deployment client The hostname of the client.
The method according to claim 1, further comprising: after sending the installation agent instruction to the deployment client:

The deployment server sends an address addition instruction to the deployment client based on the automated operation and maintenance tool, the address addition instruction includes a search instruction, and the address addition instruction is used to instruct the deployment client When the above search command confirms that the domain name and IP address of the management server are not included in the domain name file, the domain name and IP address of the management server are added to the domain name file.
The method according to claim 4, further comprising: after sending the address addition instruction to the deployment client:

The deployment server sends a registration instruction to the deployment client based on the automated operation and maintenance tool, and the registration instruction is used to instruct the deployment client to add the domain name and IP address of the management server to the authentication configuration file, and authenticate the management server according to the authentication configuration file.
The method according to claim 1, wherein the deployment server obtains the registration result of the deployment client on the management server based on the automated operation and maintenance tool, including:

The deployment server obtains the registration completion status of the deployment client based on the automated operation and maintenance tool, and then sends a test instruction to the deployment client, and the test instruction is used to instruct the deployment client to test in the Whether the management server is successfully registered.
The method according to claim 1, further comprising: after sending the installation agent instruction to the deployment client:

The deployment server acquires the successful registration status of the deployment client based on the automated operation and maintenance tool,

The deployment server sends a configuration change instruction to the deployment client based on the automated operation and maintenance tool, and the configuration change instruction is used to instruct the deployment client to add a configuration file at the target location of the agent program.
A method for deploying an agent based on an automated operation and maintenance tool, wherein the method includes:

The deployment server sends detection instructions to the deployment client based on the installed automated operation and maintenance tool;

The deployment client detects that an authentication configuration file is included locally according to the detection instruction, and the authentication file contains a preset statement, generates a detection pass notification, and sends the detection pass notification to the deployment server ;

After the deployment server receives the detection pass notification, it sends an installation agent instruction to the deployment client based on the automated operation and maintenance tool;

The deployment client obtains the agent software package from the software package manager according to the installation agent instruction and installs the agent program;

The deployment server sends a host name change command to the deployment client after detecting that the deployment client is successfully installed based on the automated operation and maintenance tool;

The deployment client changes the first host name to a second host name according to the host change instruction, the first host name is the original host name of the deployment client, and the second host name is in a preset format. CPU name;

The deployment client registers with the management server and obtains a registration result;

The deployment server obtains the registration result of the deployment client on the management server based on the automated operation and maintenance tool, and restores the second hostname to the first hostname.
A computer-readable storage medium, characterized in that, the computer-readable storage medium stores a program, and when the program is run on a computer, the computer implements the method described in any one of claims 1 to 8 .
A computer device, characterized in that it includes:

memory for storing computer programs;

The processor is configured to call the computer program stored in the memory, and execute the method according to any one of claims 1 to 8 according to the obtained program.